CVE-2025-47914
published 2025-11-19CVE-2025-47914: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed…
PriorityP425medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.55%
45.1th percentile
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | golang-go.crypto | < golang-go.crypto 1:0.45.0-1 (forky) | golang-go.crypto 1:0.45.0-1 (forky) |
| golang.org | x_crypto | >= 0 < 0.45.0 | 0.45.0 |
| golang.org | x_crypto_golang.org_x_crypto_ssh_agent | < 0.45.0 | 0.45.0 |
| golang | crypto | < 0.45.0 | 0.45.0 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
osv5.3MEDIUM
vendor_debian5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
ghsa·2025-11-19
CVE-2025-47914 [MEDIUM] CWE-125 golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
OSV
CVE-2025-47914: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is m
osv·2025-11-19·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914: SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is m
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
OSV
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
osv·2025-11-19
CVE-2025-47914 Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
OSV
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
osv·2025-11-19
CVE-2025-47914 [MEDIUM] golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Red Hat
golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
vendor_redhat·2025-11-19·CVSS 5.3
CVE-2025-47914 [MEDIUM] CWE-125 golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
A flaw was found in the SSH Agent servers component (golang.org/x/crypto/ssh/agent). This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending a specially crafted, malformed message during new identity requests. The server fails to validate the size of these messages, leading to an out-of-bounds read that can cause the program to panic and terminate.
Statement: This vulnerability is rated Moderate for Red Hat products. The golang.org/x/crypto/ssh/agent library, when used in SSH
Debian
CVE-2025-47914: golang-go.crypto - SSH Agent servers do not validate the size of messages when processing new ident...
vendor_debian·2025·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914: golang-go.crypto - SSH Agent servers do not validate the size of messages when processing new ident...
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 1:0.45.0-1)
sid: resolved (fixed in 1:0.45.0-1)
trixie: open
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503181 ***
Bugzilla
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503324 ***
Bugzilla
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 gvisor-tap-vsock: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
podman is not affected by CVE-2025-47914.
The vulnerability affects golang.org/x/crypto/ssh/agent and was fixed in v0.45.0. podman currently uses golang.org/x/crypto v0.54.0, which includes the fix.
Bugzilla
CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 buildah: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Apptainer long ago updated past this vulnerable version v0.45.0, and the current released apptainer.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.50.0
Besides that, Apptainer doesn't even use the
Bugzilla
CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 vhs: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 jfrog-cli: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 jfrog-cli: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 jfrog-cli: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 tailscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 tailscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 tailscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Apptainer long ago updated past this vulnerable version v0.45.0, and the current released apptainer.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.50.0
Besides that, Apptainer doesn't even use the im
Bugzilla
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503200 ***
Bugzilla
CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Apptainer long ago updated past this vulnerable version v0.45.0, and the current released apptainer.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.50.0
Besides that, Apptainer doesn't even use the imp
Bugzilla
CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Apptainer long ago updated past this vulnerable version v0.45.0, and the current released apptainer.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.50.0
Besides that, Apptainer doesn't even use the imp
Bugzilla
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 doctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 trayscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 trayscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 trayscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 lw-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 caddy: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
podman is not affected by CVE-2025-47914.
The vulnerability affects golang.org/x/crypto/ssh/agent and was fixed in v0.45.0. podman currently uses golang.org/x/crypto v0.54.0, which includes the fix.
Bugzilla
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted mo
Bugzilla
CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kubernetes1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 prometheus-podman-exporter: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kubernetes1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 matterbridge: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-facebookincubator-go2chef: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 clash-meta: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-appc-docker2aci: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 complyctl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 gopass-hibp: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted
Bugzilla
CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 forgejo: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 vagrant: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kappanhang: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 gh: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kubernetes1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted m
Bugzilla
CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503192 ***
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503261 ***
Bugzilla
CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-aliyun-cli: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted mo
Bugzilla
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 age: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 k9s: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 podman-tui: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 kubernetes1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-cloudflare-redoctober: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-theoapp-theo-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 nng: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 chezmoi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 hcloud: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-mongodb-mongo-driver: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 podman: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
@Matteo Isn't Fedora 42 EOL? Wonder why this was filed.
Bugzilla
CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-task: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Apptainer long ago updated past this vulnerable version v0.45.0, and the current released apptainer.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.50.0
Besides that, Apptainer doesn't even use the
Bugzilla
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503274 ***
Bugzilla
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 golang-x-crypto: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 headscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 headscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 headscale: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 nebula: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o1.34: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 snapd: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 google-guest-agent: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 docker-buildx: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503343 ***
Bugzilla
CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-facebookincubator-contest: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503185 ***
Bugzilla
CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o1.30: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-francoispqt-gojay: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o1.33: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503169 ***
Bugzilla
CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-acme-lego: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 rclone: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 singularity-ce: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 golang-github-git-5: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted mo
Bugzilla
CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-sigs-k8s-aws-iam-authenticator: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 pack: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 apptainer: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
*** This bug has been marked as a duplicate of bug 2503210 ***
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Discussion:
This is a very old vulnerability, a bogus notification. Openbao long ago updated past this vulnerable version v0.45.0, and the current released openbao.spec says
Provides: bundled(golang(golang.org/x/crypto)) = v0.52.0
Besides that, Openbao doesn't even use the impacted
Bugzilla
CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 ollama: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 golang-github-cloudflare-cfssl: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 containers-common: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 trivy: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
CVE-2025-47914 openbao: SSH Agent servers: Denial of Service due to malformed messages [epel-9]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 restic: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 gopass-jsonapi: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
CVE-2025-47914 keepassxc: SSH Agent servers: Denial of Service due to malformed messages [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cheat: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 docker-buildkit: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 gopass: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 cri-o1.32: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 cri-o: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
CVE-2025-47914 kubernetes1.31: SSH Agent servers: Denial of Service due to malformed messages [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
bugzilla·2026-07-21·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
CVE-2025-47914 transifex-client: SSH Agent servers: Denial of Service due to malformed messages [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Bugzilla
CVE-2025-47914 golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
bugzilla·2025-11-19·CVSS 5.3
CVE-2025-47914 [MEDIUM] CVE-2025-47914 golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
CVE-2025-47914 golang.org/x/crypto/ssh/agent: SSH Agent servers: Denial of Service due to malformed messages
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
2025-11-19
Published